IDP failed to authenticate request.

mcullen4 · ‎02-06-2020

A selection of users in Bogota, Colombia are getting:
IDP failed to authenticate request. Status code="Responder" Check splunkd.log for more information about the failure.

Multiple users here in Raleigh, NC can access the logs fine.

I have read several articles indicating this is an SSO issue
But we are not doing SSO with Splunk

I do not know how to look at this splunkd.log either

nickhills · ‎02-06-2020

Open a ticket - its likely an issue on Splunks side

If my comment helps, please give it a thumbs up!

nickhills · ‎02-06-2020

Is this Splunk Cloud?

If my comment helps, please give it a thumbs up!

mcullen4 · ‎02-06-2020

Yes, this is spunk Cloud

rajasekhar14 · ‎02-06-2020

what is your authentication method?

IDP failed to authenticate request.

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Persistent Queue at TcpOut — One of Splunk's Most Practical Features

Skip the Awkward Silence: Have a .conf-ersation at .conf26

Rethinking Zero Trust: From Product Purchases to Logical Control Evidence

Join the Conversation

IDP failed to authenticate request.

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Persistent Queue at TcpOut — One of Splunk's Most Practical Features

Skip the Awkward Silence: Have a .conf-ersation at .conf26

Rethinking Zero Trust: From Product Purchases to Logical Control Evidence